Copyright © 2012 Red Hat, Inc. All rights reserved. Important 2026-08-18T20:31:25 chromium-browser: Google Chrome: Arbitrary Code Execution via Link Following 8.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H CWE-59

Link following in CredentialProvider in Google Chrome on on Windows prior to 151.0.7922.169 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)

A flaw was found in Google Chrome. A local attacker could exploit a link following vulnerability within the CredentialProvider component. This vulnerability allows for the execution of arbitrary code outside the browser's security sandbox through a local program.

This vulnerability affects Chromium-based browsers and applications utilizing QtWebEngine in Red Hat Community Projects. A local attacker could exploit a link following flaw within the CredentialProvider component, leading to arbitrary code execution outside the browser's sandbox. Exploitation requires user interaction, such as clicking a malicious link. Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. https://www.cve.org/CVERecord?id=CVE-2026-76037 https://nvd.nist.gov/vuln/detail/CVE-2026-76037 https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0826575033.html https://issues.chromium.org/issues/517612295